From 636892c8b14c9bf46235e31dfce2a3dee9def730 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=8D=BF=E4=BA=91=E7=A7=8B=E6=9C=88?= <15273589815@163.com> Date: Fri, 11 Sep 2026 21:50:39 +0800 Subject: [PATCH] =?UTF-8?q?=E7=99=BB=E5=BD=95=E6=B5=8B=E8=AF=95=E5=8F=B0?= =?UTF-8?q?=E6=94=AF=E6=8C=81=E6=8A=95=E9=A1=BE=EF=BC=9A=E5=BF=AB=E6=8D=B7?= =?UTF-8?q?=E6=8C=89=E9=92=AE=20+=20=E5=8F=AA=E8=AF=BB=E6=8E=A2=E9=92=88?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 快捷填充加 advisor_t / abc12345; - 探针加「已发布投顾方案」(GET /api/v1/advisor/recommendations/published),按 advisor 角色启用。 实测同一接口的对照:投顾令牌 200(data: []),客户令牌 403 —— 权限边界正确。 --- tools/login_console.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/tools/login_console.py b/tools/login_console.py index 580c157..62073d2 100644 --- a/tools/login_console.py +++ b/tools/login_console.py @@ -89,6 +89,7 @@ PAGE = """ + @@ -151,6 +152,8 @@ function renderProbes(roles, userId) { { label: '角色清单', path: '/api/v1/admin/roles', role: 'admin' }, { label: '我的身份(管理视角)', path: `/api/v1/admin/users/${userId}/roles`, role: 'admin' }, + { label: '已发布投顾方案', path: '/api/v1/advisor/recommendations/published', + role: 'advisor' }, ]; const box = document.getElementById('probes'); box.innerHTML = '';